Federal 100: Ron Ross

Standards bearer. In case you missed it, 2015 was not a banner year for cybersecurity, inside government or out. But in a year when plenty went wrong, Ross got a lot of things right. NIST's work is a team effort, but Ross personally has been a critical driver of getting agencies -- and plenty of other key stakeholders -- to move beyond checklist-based security. He spent much of 2015 evangelizing in the federal community, making sure NIST Special Publication 800-160 on systems security engineering and the Risk Management Framework he developed were put to good use.